Bug#1069697: lintian: debian-changelog-line-too-short CVEs

2024-04-23 Thread Thorsten Glaser
Richard Lewis dixit:

>would it make a difference if the somewhat ambiguous line "CVEs" was
>changed to "Fixes the following CVEs:" ?

It’s very much not ambiguous, as the entire entry is a list of
fixes, that’d be reducing the signal:noise ratio (besides this
part of the changelog is copy-pasted from the upstream release
announcement).

I find that lintian is overly opinionated here. I could agree,
were this just a single line (given the tag’s stated purpose),
but not for multi-line or lists.

bye,
//mirabilos
-- 
Solange man keine schmutzigen Tricks macht, und ich meine *wirklich*
schmutzige Tricks, wie bei einer doppelt verketteten Liste beide
Pointer XORen und in nur einem Word speichern, funktioniert Boehm ganz
hervorragend.   -- Andreas Bogk über boehm-gc in d.a.s.r



Bug#1069697: lintian: debian-changelog-line-too-short CVEs

2024-04-23 Thread Richard Lewis
On Tue, 23 Apr 2024, 00:12 Thorsten Glaser,  wrote:

> P: openjdk-8-doc: debian-changelog-line-too-short CVEs
> [usr/share/doc/openjdk-8-doc/changelog.Debian.gz:4]
>
> The changelog in question is:
>
>   * New upstream release
>   * CVEs
> - CVE-2024-21011
> - CVE-2024-21085
> - CVE-2024-21068
> - CVE-2024-21094
>   * Security fixes
> […]
>
> I find this a little opinionated anyway, but here not quite
> appropriate as the changelog “line” spans more than a physical
> line. Maybe, if you won’t consider the space until the next
> /^  \* / a “line”, then at least exclude itemisations from that tag?
>


would it make a difference if the somewhat ambiguous line "CVEs" was
changed to "Fixes the following CVEs:" ?


Bug#1069697: lintian: debian-changelog-line-too-short CVEs

2024-04-22 Thread Thorsten Glaser
Package: lintian
Version: 2.117.0

P: openjdk-8-doc: debian-changelog-line-too-short CVEs 
[usr/share/doc/openjdk-8-doc/changelog.Debian.gz:4]

The changelog in question is:

  * New upstream release
  * CVEs
- CVE-2024-21011
- CVE-2024-21085
- CVE-2024-21068
- CVE-2024-21094
  * Security fixes
[…]

I find this a little opinionated anyway, but here not quite
appropriate as the changelog “line” spans more than a physical
line. Maybe, if you won’t consider the space until the next
/^  \* / a “line”, then at least exclude itemisations from that tag?

Thanks.